Thank you for these suggestions. But I have a few questions.

How can I do the 2nd and 3rd point if I am using docker/podman containers?

Why is ClamAV useless?

Joplin can be a multi-user solution as well. I use Joplin with Nextcloud. If you don’t want to share notes just use Joplin and every user can use the same nextcloud instance, but different user accounts, to save their notes. If you want to share all the notes, all the users can synchronise with the same Nextcloud user. You can make different notebooks for different users. All the users, however, can see and edit notes. Joplin cannot be a solution if you want to share some notes. It is either all, or none.

Logseq can be another solution, with the same technique. However, you can use git to synchronise different databases, where one database is used in shared notes and personal databases for non-shared notes. I host my own Gitea (will soon shift to forgejo) to synchronise my Logseq databases.

AFAIK, Piped always proxies the videos through a server.

I am more familiar with Invidious. Find an Invidious server that lets you enable proxying. Some examples are yewtu.be, invidious.protokolla.fi and inv.nadeko.net. Then find an RSS app that lets you download the content, as well as supports cookies. Use the invidious server’s cookies in your RSS app to proxy the content you download. Invidious servers can provide RSS feeds for individual channels, as well as your complete subscription feed.

And if possible donate a dollar or two, regularly, to the invidious server that you use, since it takes up a lot of bandwidth and motivates the hoster to keep up what they are doing.

6. If you are self hosting for privacy, I recommend staying away from Cloudflare, that is, not to use their proxying service or Cloudflare tunnel.

More information here - https://blog.aiquiral.me/bypass-cgnat

Stingle Photos. It works only with S3.

For me the issue with Mullvad is like this… I connect to a server, I get good speeds, but after an hour or two, I get stuck at 2-3mbps. This issue gets resolved when I reconnect, even to the same server. Also, I like using OpenVPN over TCP, but their speeds, in Mullvad’s case, are terrible for all exit nodes.

It also may be the case that my ISP is deliberately ruining the IPv4 routes because I am connecting to a VPN for privacy.

I was paying $7/m for their mail, VPN and drive services. One of my major reasons to switch was their lack of linux support. They claim that it is hard to find Linux developers. Second reason was their drive’s download and upload speeds were terrible, from where I am sitting. Their VPN service is great. I always got great speeds, but their linux apps have always been terrible. Their mail service is also great, but I would like more control over it, like Mailbox.org. on Mailbox, I can encrypt my inbox using a different key, while also having the SMTP submission feature. I really ned that to integrate emails with my websites and services. Mailbox can also encrypt their cloud drive with our key, while also providing WebDAV support (how cool is that). Their mail app on android is open-source but is not available on f-droid. And the apk they provide on their website neither has a notification functionality, nor does it auto-update. Another reason was that I was limited to 3 custom domains, unless I buy their business plan. Mailbox has no such limit.

One final reason was that I did not want to keep all my apples in one basket. So, for mail, I am using mailbox, for storage, I am using a personal nextcloud and a Hetzner managed nextcloud, for VPN, I started using mullvad, but their speeds are terrible and connections are unreliable. For passwords I am using self-hosted vaultwarden.

There are a few more reasons that I do not remember, now. Proton is great, I still trust them. But these small things really go a long way.

I moved from Gmail to ProtonMail, then to Mailbox.org. Ypu can set up a mailserver on your home server, but you would need a VPS that would forward the traffic to and from your home server without you needing to open any ports. This guide can help you with TLS passthrough.

But setting up your own mailserver is a big hassle. Just pay a trusted provider and keep your inbox, and preferably all emails, encrypted with GPG.

Some people even use Raspberry Pis as their NAS. I use an old MacBook (5th gen i5) as a home server with 2 external hard drives as a NAS, which also runs a few docker containers like Jellyfin. Before that, I was using an old PC with 1st gen i3 for all these things.

The only thing preventing me to move from photoview to immich is the lack of sorting/viewing photos by folder hierarchy. I love the UI and the machine learning customisation options. They recently added the “external albums” feature, so I am hoping this folder hierarchy thing, too, will soon be implemented.

I have been trying to find such a solution but I couldn’t. I have scraped almost every Reddit post I could find on this topic but I could not find a solution that works for me. So I ended up making a simple table on Nextcloud notes. Along with that I used the Organic Maps app which is based on OSM. I just downloaded the maps I needed onto my device and I pinned some locations that I wanted to visit.

All the work was done manually. I would really appreciate if someone can develop such a solution. I am even willing to donate a few dollars.

I think I remember reading such a post where the person was saying that they are trying to develop such a solution, but it was work in progress. It was an old post, and I think they had abandoned it.

If you are behind CGNAT, this might help you understand things a little better.

This might help you understand things a little better. I would advise staying away from Cloudflare if you are self-hosting for privacy.

You can bypass CGNAT easily. Look here. I sync contacts, calender, tasks, everything from Nextcloud.

podman-compose is a made in Python, and is not official, but works great. Just rename your docker-compose.yml file to podman-compose.yml, and you’re good to go.

I have used Docker, currently using Podman. Using literally the same compose file.

You may want to check this out. This articles also explains TLS-termination and TLS-passthrough.

They rely on TLS-termination. I self-host for privacy, so I need TLS-passthrough. Cloudflare wants me to buy their enterprise plans for that.

Two reasons, basically. First, I am behind CGNAT. Second, electricity in my area is somewhat cumbersome, I need some services to be always online.